This fixes the error seen on old browsers using
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA after a DHE GCM fallure.

Thanks for all your help wkitty42!

We don't need PCI DSS compliance I hope, we just want people doing things.

Unbreak it.
While we're here, prefer ECDH so we get an 'A' from ssllabs.

only (you can still use them from JS etc).

they're enabled even if there is no usable oracle (ie: ssllabs.com).

This is easier than explaining to everyone who worries about it.  Hopefully
there's nothing left that requires TLS_RSA suites from the client.

Areafix requests to unlink a node from an area would corrupt the list of
linked nodes: the *last* listed node would always be removed. If this was
not the node that submitted the areafix request, then 2 nodes would be
removed from the list of linked-nodes for an echo.
To simplify this, we're just going to not write the removed node back to
the area file, but leave it in the in-memory list. So technically, the node
won't be unlinked until the next run of SBBSecho when the area file is
re-parsed. If that's a problem, we can always add run-time removal from
the in-memory list later. Reported by Alterego (ALTERANT).

specified on the command-line (-n option). This also would have fixed
Nelgin's issue with this script.

to and from extension header fields were being set (for the mail base) even
when the to or from name was not a valid local user name (thus an extension
value of "0" was being stored in the header) - causing netmail imported with
postmsg.js to never get exported.

*.msg).

Reported by Belthesar... a real JSDoor user who was not paid to be in this commercial.

finger service at vert.synchro.net), report that error instead of
TypeError: finger_result.join is not a function
(reported by Nelgin)

non-deleted and active user records.
Renamed the old "User List" menu option: "List All User Records"
The online help probably needs fixing now: TODO

Also warn if the default "My Brand-new BBS" is still set.

SBBSCTRL env var isn't set (defualts to "/sbbs/ctrl" instead, like the other
utils).

This allows redirect targets from paths that don't exist.  Required to
implement hard-coded API endpoints via ssjs.

not set (or blank), use the default ("/sbbs/ctrl") and print a warning to
stderr. This resolves a FAQ for sysops that struggle with setting the SBBSCTRL
env var, but do have sbbs install in /sbbs or a symlink from /sbbs to where
sbbs is actually installed.

Note: this function is different than the one previously defined in getctrl.c
but never used. If/when we ever really need to support PREFIX, then perhaps
we'll use that one (which copies a string to a buffer).

-r    = display raw message body text (not MIME-decoded)

 replace the recursive binary-search scanDictionary method with a linear search function to avoid infinite recursion

Don't diddle touched, it's used differently now.

Also, fix centre() to support local display.